Worried that NIS2008 virus scanner may not be working correctly

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

My copy of norton does that, it counts the file and the folder as two items and yes norton now detects cookies. If you want to see it in action for cookies goto http://www.theglobeandmail.com/ nortons alwasy going off on that site's cookie. It's nothing to be worried about. every spyware program in the world detects cookies.  looks like your copy of norton is working to me. it's detecting stuff.

 

 

Message Edited by jarrycanada on 06-17-2008 03:58 PM

thanks, one more question...I also just noticed this.  No matter what individual file I scan I get the words Zone.Identifier after the name of the file during the scan like this:

 

Is this normal?   And what does Zone.Identifier refer to?

It is related to a Trojan Horse.  I would advise you to Update your Norton Product and peform a Full System Scan.

 

See the Web Link: http://www.symantec.com/en/uk/security_response/writeup.jsp?docid=2005-070814-4819-99&tabid=1 . I would advise Clicking on Technical Details for information on this; if the F.S.S. Detects any files which it cannot Delete correctly, see Removal.

Message Edited by Floating_Red on 06-18-2008 08:22 PM
Message Edited by Floating_Red on 06-18-2008 08:24 PM
Message Edited by Floating_Red on 06-18-2008 08:38 PM

not sure what Floating_Red is talking about it being a trojan, because when I type Zone.Identifier into google, it shows up as this..

 

 http://www.f-secure.com/v-descs/zoneident.shtml

 There is no virus by this name. However, we occasionally get queries about this, as many Windows XP files have an invisible stream by this name. Existance of Zone.Identifier stream on some files is normal, and as such is of no cause for concern. This stream is generated by Internet Explorer and Outlook when saving files from to local disk from different security zones.

 

My understanding of this is that norton is just reading the ADS tags in the stream. I get that too on files, it's on files you download with IE or from the net, also norton will now show strange stuff that isn't on your system in the scanning window sometimes when you do a full scan. it's best just to ignore it, Whats odd about this is it will show files that are and are NOT on your system. What it's doing is scanning for known Spyware/Virus/Trojan based on there names and places on the drive.

 

But I would run norton update tell it says it's up to date and do a full system scan just to be on the safe side.

Message Edited by jarrycanada on 06-18-2008 02:42 PM

no it's not a trojan.  I scanned with both NIS fully updated and kaspersky and several antispyware apps.  All were fully updated and the scans came back clean.  I went to a couple of other security forums and they explained what it was.  See here: http://www.f-secure.com/v-descs/zoneident.shtml and here http://forum.sysinternals.com/forum_posts.asp?TID=10488

 

thanks anyway :smileyhappy:

jarrycanada beat me to it!  Thanks Jarry!

and I am finding out that the new Firefox 3 also leaves the ADS tag in the stream :smileyvery-happy:

First of all, I never said it was a Trojan Horse.  And I did give you a Web Link to it so maybe you should read that before accusing me of things!

 

Secondly, it is not advised to have more than one Security Product on your system at any one time as there will be conflicts and, therefore, your Scans and Product(s) may will not work correctly; choose one you like the best and stick to it.

Kaspersky offers free online scan :smileywink:

Why not use the symantec (http://security.symantec.com/sscv6/default.asp?productid=ssr&langid=ie&venid=sym) one?

 

Did you do a Full System Scan with your Norton Product?

 

And another thing: I know how Norton works and, therefore, know that it Scans for files that could be there!

of course I scanned with a fully updated NIS and did a full scan.  And also Kaspersky's free online scan because that is what people at CastleCops and Wilders Security forum recommended and with SuperAntiSpyware and A squared free editions (on demand only so it doesn't interfere with NIS) and everything came back clean.  Also did a hijackthis log and the people at Wilders and Castlecops said it was a clean log and that I had nothing to worry about. 

 

I appreciate your help Floating_Red.  And your post saying that it was "related to a trojan horse" kinda put me in panic mode because the only websites I had visited since reinstalling windows vista a couple days ago was here and cnet and I scan everything before I install it and everything was clean. So you see I couldn't figure out how I could have possibly been infected with anything.  

 

Thanks again and no worries.  :smileyhappy:

Message Edited by sharris on 06-18-2008 03:40 PM